CVE-2026-125805

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AyeCode Ltd GeoDirectory geodirectory allows Stored XSS.This issue affects GeoDirectory: from n/a through 2.8.204...

VulnCheck KEV: CVE-2026-118635

The The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.8.198 This is due to the software allowing users to execute an action that does not properly validate a...

CVE-2026-124250

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AyeCode Ltd GeoDirectory geodirectory allows Reflected XSS.This issue affects GeoDirectory: from n/a through 2.8.202...

CVE-2026-124250

The GeoDirectory plugin by AyeCode Ltd is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw due to improper neutralization of input during web page generation. This vulnerability impacts versions from n/a through 2.8.202 . An attacker could leverage this flaw to execute malicious scripts ...

CVE-2026-124250 WordPress GeoDirectory plugin <= 2.8.202 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AyeCode Ltd GeoDirectory geodirectory allows Reflected XSS.This issue affects GeoDirectory: from n/a through 2.8.202...

EUVD-2026-123347

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AyeCode Ltd GeoDirectory geodirectory allows Reflected XSS.This issue affects GeoDirectory: from n/a through 2.8.202...

PT-2026-145085

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AyeCode Ltd GeoDirectory geodirectory allows Reflected XSS.This issue affects GeoDirectory: from n/a through 2.8.202...

CVE-2026-124250: AyeCode Ltd GeoDirectory: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AyeCode Ltd…

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AyeCode Ltd GeoDirectory geodirectory allows Reflected XSS.This issue affects GeoDirectory: from n/a through 2.8.202...

WordPress GeoDirectory plugin <= 2.8.202 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by AndrewN in WordPress Plugin GeoDirectory versions = 2.8.202...

CVE-2026-120082

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postcontent' parameter in all versions up to, and including, 2.8.200 due to insufficient input sanitization and output escaping. This makes ...

CVE-2026-120082 GeoDirectory <= 2.8.200 - Unauthenticated Stored Cross-Site Scripting via Nested '[gd_dynamic_content]' Shortcode in post_content

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postcontent' parameter in all versions up to, and including, 2.8.200 due to insufficient input sanitization and output escaping. This makes ...

CVE-2026-120082

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress (versions up to and including 2.8.200 ) are vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping within the post_content parame...

EUVD-2026-118556

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postcontent' parameter in all versions up to, and including, 2.8.200 due to insufficient input sanitization and output escaping. This makes ...

WordPress GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin <= 2.8.200 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Kuba in WordPress Plugin GeoDirectory versions = 2.8.200...

CVE-2026-116752

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postimages' parameter in all versions up to, and including, 2.8.197 due to insufficient input sanitization and output escaping. This makes i...

CVE-2026-116752

The GeoDirectory – WP Business Directory and Classified Listings Directory plugins for WordPress (versions up to and including 2.8.197 ) are vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping within the 'post_images' parameter. ...

CVE-2026-116752 GeoDirectory <= 2.8.197 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_images' Image Title Delimiter Injection

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postimages' parameter in all versions up to, and including, 2.8.197 due to insufficient input sanitization and output escaping. This makes i...

EUVD-2026-114700

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postimages' parameter in all versions up to, and including, 2.8.197 due to insufficient input sanitization and output escaping. This makes i...

CVE-2026-116752 GeoDirectory <= 2.8.197 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_images' Image Title Delimiter Injection

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postimages' parameter in all versions up to, and including, 2.8.197 due to insufficient input sanitization and output escaping. This makes i...

WordPress GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin <= 2.8.197 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by mamgad mamgad in WordPress Plugin GeoDirectory versions = 2.8.197...